Urgent Help with Legacy Win NT System

We have an older Win NT Small Business Server still up and running to support a MRP Legacy accounting package that runs on a Centura database.

Within the last two days users have complained that the software is very slow and when I look at the Win NT Task Manager there is a program, TCPSVCS.exe that's running between 88 & 99% CUP load. Access to this server is limited to only a few individuals and they all have virus protection on their local clients.

I have no ideas as to where to begin to look to resolve this issue. Any thoughts on what might be causing this? Virus? other ?

Also, assuming I can correct this can this machine be virtualized with something like VMWare so I can move it to more modern hardware?

I wondered if that might be the problem and tried to download and run a few malware programs but nothing seems compatible with Win NT. (tried things like MalwareBytes, etc). Anyone know of anything that might be backward compatible with this operating system?

As I'm continuing to look at this I went to the server and opened Control Panel / Network Icon and selected the Network Protocol Tab to look at the TCP/IP settings. I only have one network adapter on this server and it's on the motherboard. This was originally setup for a Static IP and the entry for the "specified" IP is entered as 10.0.0.5

I thought this strange as I didn't remember it as such so I opened a Command Window and typed ipconfig /all and it's telling me that the network adapter for this server is addressed as 10.0.0.2 (what I remembered).

How can this be the case? And might this be part of the problem? I can't change anything right now as I have users on the system but thought tonight that I'd change what I say in the Network Protocol entry screen to remove the 10.0.0.5 back to 10.0.0.2

This make any sense as I'm not really a network guy just one person trying to run a small family business without breaking the bank on IT stuff.

Thanks all for your inputs. Shut the server down after everyone logged off last night to further investigate. Realized that the two IP address assignments were as a result of a previous network card that was removed from the machine back in February (routine cleaning) but was not "removed" from from the devices list under the network settings. I removed / uninstalled the card and then found and loaded a newer network card driver for the one being used and the TCPSCVS.exe load went from the 90% range down to about Nil.

Realized that the two IP address assignments were as a result of a previous network card that was removed from the machine back in February (routine cleaning) but was not "removed" from from the devices list under the network settings.

I did have a quick look online and saw something along these lines mentioned but it was pertaining to a newer OS so I wasn't sure.